Lucene search
Veracode Vulnerability DatabaseVERACODE:25356HistoryMay 10, 2020 - 11:27 p.m.
Arbitrary Code Execution
2020-05-1023:27:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.007
Percentile
80.4%
wavpack is vulnerable to arbitrary code execution. A heap-based buffer over-read in the ParseDsdiffHeaderConfig function in cli/dsdiff.c allows a remote attacker to execute arbitrary code on the system or cause a denial-of-service via a malicious DSDIFF file.
References
packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=889559
github.com/dbry/WavPack/commit/36a24c7881427d2e1e4dc1cef58f19eee0d13aec
github.com/dbry/WavPack/issues/28
seclists.org/bugtraq/2019/Dec/37
usn.ubuntu.com/3578-1/
www.debian.org/security/2018/dsa-4125
Related
alpinelinux
alpinelinux
CVE-2018-7253
2018-02-19 23:29:00
debiancve
debiancve
CVE-2018-7253
2018-02-19 23:29:00
cve
cve
CVE-2018-7253
2018-02-19 23:29:00
cvelist
cvelist
CVE-2018-7253
2018-02-19 23:00:00
prion
prion
Heap overflow
2018-02-19 23:29:00
ubuntucve
ubuntucve
CVE-2018-7253
2018-02-19 00:00:00
redhatcve
redhatcve
CVE-2018-7253
2018-02-21 20:19:19
osv
osv
CVE-2018-7253
2018-02-19 23:29:00
wavpack - security update
2018-02-27 00:00:00
libwavpack1-32bit-5.4.0-1.6 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2018-7253
2018-02-19 23:29:00
fedora
fedora
[SECURITY] Fedora 27 Update: wavpack-5.1.0-7.fc27
2018-02-27 17:31:17
[SECURITY] Fedora 26 Update: wavpack-5.1.0-7.fc26
2018-03-13 17:19:56
[SECURITY] Fedora 26 Update: mingw-wavpack-5.1.0-4.fc26
2018-03-06 17:34:15
nessus
nessus
Fedora 26 : wavpack (2018-d94e205df8)
2018-03-14 00:00:00
Fedora 27 : wavpack (2018-3ba1be2e79)
2018-02-28 00:00:00
Ubuntu 17.10 : wavpack vulnerabilities (USN-3578-1)
2018-02-23 00:00:00
openvas
openvas
Fedora Update for wavpack FEDORA-2018-3ba1be2e79
2018-02-28 00:00:00
Fedora Update for wavpack FEDORA-2018-d94e205df8
2018-03-14 00:00:00
Ubuntu: Security Advisory (USN-3578-1)
2018-10-26 00:00:00
ubuntu
ubuntu
WavPack vulnerabilities
2018-02-22 00:00:00
archlinux
archlinux
[ASA-201802-13] lib32-wavpack: arbitrary code execution
2018-02-23 00:00:00
[ASA-201802-12] wavpack: arbitrary code execution
2018-02-23 00:00:00
debian
debian
[SECURITY] [DSA 4125-1] wavpack security update
2018-02-27 20:32:22
[SECURITY] [DSA 4125-1] wavpack security update
2018-02-27 20:32:22
freebsd
freebsd
wavpack -- multiple vulnerabilities
2018-05-09 00:00:00
slackware
slackware
[slackware-security] wavpack
2019-12-19 23:44:00
mageia
mageia
Updated wavpack packages fix security vulnerabilities
2019-01-23 18:50:09
suse
suse
Security update for wavpack (moderate)
2021-01-24 00:00:00
Security update for wavpack (moderate)
2021-01-24 00:00:00